Recommendations Tracker
HHS-OIG provides independent and objective oversight that promotes economy, efficiency, and effectiveness in HHS programs and operations. To drive this positive change, we produce reports and identify recommendations for improvement. We have developed this public-facing page for tracking all of our open recommendations.
Use the Top Unimplemented View below to read OIG's Top Unimplemented Recommendations. In OIG’s view, these top recommendations for HHS programs, if implemented, would have the greatest impact in terms of cost savings, program effectiveness and efficiency, and public health and safety. Learn more
Summary of All Recommendations
Updated Monthly · Last updated on Sept. 11, 2026
1,051
Unimplemented
recommendations
3,529
Implemented and Closed
recommendations since FY 2017
Views
OIG Recommendations Grouped by Report
Showing 81–100 of 1,427 reports, containing 4,580 recommendations
Sorted by latest release date
-
Medicare Improperly Paid Selected Optometrists for Services Provided to Enrollees at Nursing Facilities
26-A-05-015.01We recommend that the Centers for Medicare & Medicaid Services collaborate with CMS contractors to review all claims submitted by the 15 selected optometrists to determine compliance with Medicare requirements and recover the portion of the $3,059,204 in estimated overpayments made to those optometrists during our audit period that are within the 4-year reopening period.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $3,059,204
- Last Update Received
- 04/15/2026
- Next Update Expected
- 10/15/2026
- Legislative Related
- No
26-A-05-015.02We recommend that the Centers for Medicare & Medicaid Services instruct the CMS contractors to notify, as the contractors deem appropriate, providers in our sample that received an overpayment(s) to consider conducting one or more internal audits or investigations based on the risks identified by this audit to identify any similar overpayments the provider might have received and return any identified funds to the Medicare program.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 04/15/2026
- Next Update Expected
- 10/15/2026
- Legislative Related
- No
26-A-05-015.03We recommend that the Centers for Medicare & Medicaid Services instruct CMS contractors to provide training and guidance that are specific to Medicare requirements for billing optometrist services provided in nursing facilities.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/30/2026
- Legislative Related
- No
26-A-05-015.04We recommend that the Centers for Medicare & Medicaid Services instruct CMS contractors to increase claim reviews of optometrists' E/M services.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- 04/15/2026
- Next Update Expected
- 10/15/2026
- Legislative Related
- No
26-A-05-015.05We recommend that the Centers for Medicare & Medicaid Services instruct CMS contractors to develop system edits to prevent the incorrect billing of E/M services.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- 03/25/2026
- Next Update Expected
- 10/14/2026
- Legislative Related
- No
-
Four of Thirty Selected Dental Providers Did Not Comply With Terms and Conditions and Federal Requirements for Expending Provider Relief Fund Payments
26-A-02-014.01We recommend that HRSA require the selected dental providers to return to the Federal Government any PRF payments used to offset inaccurately calculated lost revenue amounts or properly account for these lost revenues.- Status
- Closed Implemented
- Responsible Agency
- HRSA
- Response
- Concur
- Potential Savings
- $3,381,110
- Last Update Received
- -
- Closed Date
- 01/09/2026
- Legislative Related
- No
-
Medicare Payments for Continuous Glucose Monitors and Supplies Exceeded Supplier Costs and Retail Market Prices, Indicating Medicare Can Save At Least Tens of Millions of Dollars in One Year
26-E-04-005.01CMS should pursue reductions to Medicare's payment rates for CGMs and supplies.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 07/09/2026
- Legislative Related
- No
26-E-04-005.02CMS should take action to prevent overpayments caused by suppliers' improper use of billing codes for CGMs and supplies to achieve potentially millions of dollars of cost savings for Medicare and enrollees.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $7,354,348
- Last Update Received
- 03/31/2026
- Next Update Expected
- 04/02/2027
- Legislative Related
- No
-
Gaps in NIH’s Oversight Put Millions in Funding for Other Transactions at Greater Risk of Fraud, Waste, or Abuse
26-E-04-006.01NIH should assess the benefits of Other Transactions to inform future Other Transaction policies and use.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 05/05/2026
- Next Update Expected
- 05/11/2027
- Legislative Related
- No
26-E-04-006.02NIH should strengthen justifications for using Other Transactions.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 05/05/2026
- Next Update Expected
- 05/11/2027
- Legislative Related
- No
26-E-04-006.03NIH should more effectively manage the unique risks of all Other Transactions.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 05/05/2026
- Next Update Expected
- 05/11/2027
- Legislative Related
- No
26-E-04-006.04NIH should establish internal controls to protect Other Transactions from mismanagement and fraud by both Other Transaction staff and recipients.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 05/05/2026
- Next Update Expected
- 05/11/2027
- Legislative Related
- No
-
Dermatology Providers Generally Met Medicare Requirements for Evaluation and Management Services Performed on Same Day as Minor Surgical Procedures
26-A-04-013.01We recommend that the Centers for Medicare & Medicaid Services work with the MACs and other CMS contractors to continue reviews of dermatologists' claims for E/M services performed on the same day as a minor surgical procedure, which could have resulted in an estimated cost savings of $62,915,655.- Status
- Closed Acceptable Alternative
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/26/2026
- Legislative Related
- No
26-A-04-013.02We recommend that the Centers for Medicare & Medicaid Services work with the MACs and other CMS contractors to continue to educate dermatologists on Medicare requirements for billing E/M services, including maintaining sufficient information to support that the E/M services were performed and billed at the appropriate service level and using modifier 25 appropriately when billing E/M services performed on the same day as a minor surgical procedure.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/18/2026
- Legislative Related
- No
-
CMS Put $11.2 Billion at Risk of Fraud, Waste, and Abuse by Not Properly Closing Contracts
26-A-04-012.01We recommend that the Centers for Medicare & Mediciad Services complete the administrative closeout requirements for the 12 contracts, totaling $2.1 billion, that remain overdue for closeout.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 05/13/2026
- Next Update Expected
- 11/14/2026
- Legislative Related
- No
26-A-04-012.02We recommend that the Centers for Medicare & Medicaid Services develop policies and procedures that clearly define documentation requirements, roles and responsibilities, and alternative procedures used so that contracts are closed timely.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 05/13/2026
- Next Update Expected
- 11/14/2026
- Legislative Related
- No
-
Nearly All Skilled Nursing Services Provided by Pinnacle Multicare Nursing and Rehabilitation Center Did Not Meet Medicare Payment Requirements
26-A-02-011.01We recommend that Pinnacle Multicare Nursing and Rehabilitation Center refund to the Medicare program $31,227,884 for skilled nursing services claims that did not meet Medicare requirements.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $31,227,884
- Last Update Received
- 03/11/2026
- Next Update Expected
- 09/11/2026
- Legislative Related
- No
26-A-02-011.02We recommend that Pinnacle Multicare Nursing and Rehabilitation Center consider conducting one or more internal audits or investigations for claims before and after our audit period based on the risks identified by this audit to identify any similar overpayments the provider might have received and return any identified overpayments to the Medicare program.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/11/2026
- Legislative Related
- No
26-A-02-011.03We recommend that Pinnacle Multicare Nursing and Rehabilitation Center provide additional training to its clinical and billing personnel on its procedures related to assigning appropriate billing codes when submitting claims for Medicare reimbursement; providing enrollees only reasonable and necessary skilled nursing services; and maintaining proper documentation to support services provided.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/11/2026
- Legislative Related
- No
-
Pennsylvania Correctly Invoiced Rebates to Manufacturers for Most Physician-Administered Drugs Dispensed to Enrollees of Medicaid Managed-Care Organizations
26-A-03-009.01We recommend that the Pennsylvania Department of Human Services invoice for and collect from manufacturers rebates totaling $488,051 ($284,617 Federal share) for single-source and top-20 multiple-source physician-administered drugs and refund the Federal share of rebates collected.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $284,617
- Last Update Received
- 03/10/2026
- Next Update Expected
- 09/12/2026
- Legislative Related
- No
26-A-03-009.02We recommend that the Pennsylvania Department of Human Services continue to review exclusion reports and invoice manufacturers for rebate-eligible drugs dispensed after our audit period.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/10/2026
- Next Update Expected
- 09/12/2026
- Legislative Related
- No
26-A-03-009.03We recommend that the Pennsylvania Department of Human Services update its policies and procedures to require steps to regularly review exclusion reports for rebate eligible NDCs, and invoice for rebate those drugs identified as rebate eligible.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/10/2026
- Next Update Expected
- 09/12/2026
- Legislative Related
- No
-
Texas' Ambulance Services Supplemental Payment Program Did Not Comply With Federal and State Reimbursement Requirements
26-A-06-008.01We recommend that the Texas Department of Health and Human Services require training for all individuals that certify ASSPP cost reports on how to review cost reports for accuracy.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/05/2026
- Next Update Expected
- 09/05/2026
- Legislative Related
- No
26-A-06-008.02We recommend that the Texas Department of Health and Human Services revise its policies and procedures to require ambulance providers to submit sufficient documentation that allows the State agency to determine whether costs claimed on ASSPP cost reports are related to the provision of contracted patient care.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/05/2026
- Next Update Expected
- 09/05/2026
- Legislative Related
- No
-
South Carolina Did Not Comply With Federal Waiver and State Requirements at 19 of 20 Adult Day Care Facilities
26-A-04-007.01We recommend that the South Carolina Department of Health and Human Services work with the South Carolina Department of Public Health to ensure that providers correct the 204 instances of provider noncompliance identified in this report.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/18/2026
- Legislative Related
- No
26-A-04-007.02We recommend that the South Carolina Department of Health and Human Services improve its oversight and monitoring of providers.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/18/2026
- Legislative Related
- No
26-A-04-007.03We recommend that the South Carolina Department of Health and Human Services work with providers to improve their facilities, staffing, and training.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/18/2026
- Legislative Related
- No
-
Medicare Improperly Paid Suppliers $22.7 Million Over 7 Years for Durable Medical Equipment, Prosthetics, Orthotics, and Supplies Provided to Enrollees During Inpatient Stays
26-A-09-006.01We recommend that the Centers for Medicare & Medicaid Services direct the DME MACs to recover from suppliers up to $22,671,778 in identified improper payments for our audit period that are within the 4-year reopening period in accordance with CMS's policies and procedures.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $22,671,778
- Last Update Received
- 03/31/2026
- Next Update Expected
- 09/30/2026
- Legislative Related
- No
26-A-09-006.02We recommend that the Centers for Medicare & Medicaid services direct the DME MACs to recommend that the suppliers refund to enrollees up to $5,853,922 in deductible and coinsurance amounts that may have been incorrectly collected from them or from someone on their behalf.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 04/13/2026
- Next Update Expected
- 11/05/2026
- Legislative Related
- No
26-A-09-006.03We recommend that the Centers for Medicare & Medicaid Services instruct the DME MACs to notify, as CMS deems appropriate, suppliers that received an overpayment or overpayments to consider conducting one or more internal audits or investigations based on the risks identified by this audit to identify any similar overpayments the supplier might have received and return any identified overpayments to the Medicare program.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 04/13/2026
- Next Update Expected
- 11/05/2026
- Legislative Related
- No
26-A-09-006.04We recommend that the Centers for Medicare & Medicaid Services identify any DMEPOS claims after our audit period for items provided to enrollees during inpatient stays and direct the DME MACs to recover any improper payments.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 07/01/2026
- Next Update Expected
- 01/01/2027
- Legislative Related
- No
26-A-09-006.05We recommend that the Centers for Medicare & Medicaid Services review system edits to determine whether any refinements are necessary to prevent improper payments to suppliers for DMEPOS items provided to enrollees during inpatient stays.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/15/2026
- Legislative Related
- No
-
CMS’s Special Focus Facility Program for Nursing Homes Has Not Yielded Lasting Improvements
26-E-01-004.01CMS should impose more nonfinancial enforcement remedies that encourage sustained compliance.- Status
- Closed Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/03/2026
- Legislative Related
- No
26-E-01-004.02CMS should assess the extent to which it took enhanced enforcement actions for Special Focus Facility (SFF) graduates and the effectiveness of those actions, particularly for graduates that received a deficiency for staffing.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/02/2026
- Next Update Expected
- 09/03/2027
- Legislative Related
- No
26-E-01-004.03CMS should incorporate nursing home ownership information into the Special Focus Facility (SFF) program, such as in selecting SFFs and identifying patterns of poor performance.- Status
- Closed Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/05/2026
- Legislative Related
- No
-
Medicare Home Health Agency Provider Compliance Audit: VNA Care Network
26-A-05-005.01We recommend that VNA Care Network refund the $6,171 in overpayments to the Medicare program.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $6,171
- Last Update Received
- -
- Closed Date
- 03/17/2026
- Legislative Related
- No
26-A-05-005.02We recommend that VNA Care Network consider conducting one or more internal audits or investigations for claims before and after our audit period based on the risks identified by this audit to identify any similar overpayments the provider might have received and return any identified overpayments to the Medicare program.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/17/2026
- Legislative Related
- No
26-A-05-005.03We recommend that VNA Care Network strengthen its review processes for identification of inaccuracies in medical record documentation to improve compliance with Medicare billing requirements.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/17/2026
- Legislative Related
- No
-
Connecticut Could Better Ensure That Intermediate Care Facilities for Individuals With Intellectual Disabilities Comply With Federal Requirements for Life Safety, Emergency Preparedness, and Infection Control
26-A-01-004.01We recommend that the Connecticut Department of Public Health follow up with the 15 ICF/IIDs reviewed to verify that they have taken corrective actions on the life safety, emergency preparedness, and infection control deficiencies identified during the audit.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/23/2026
- Legislative Related
- No
26-A-01-004.02We recommend that the Connecticut Department of Public Health work with CMS to develop standardized life safety training for ICF/IID staff.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 02/23/2026
- Next Update Expected
- 08/23/2026
- Legislative Related
- No
-
Indiana Did Not Fully Comply With Federal Waiver and State Health, Safety, and Administrative Requirements at 30 Residential Settings
26-A-05-002.01We recommend that the Indiana Family and Social Services Administration work with residential providers to correct the 246 instances of provider noncompliance identified in this report.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2026
- Legislative Related
- No
26-A-05-002.02We recommend that the Indiana Family and Social Services Administration improve its oversight and monitoring of residential providers.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2026
- Legislative Related
- No
26-A-05-002.03We recommend that the Indiana Family and Social Services Administration work with the residential providers to improve internal controls for health and safety at residential settings, maintenance of records, and training.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2026
- Legislative Related
- No
-
Many Medicare Advantage and Medicaid Managed Care Plans Have Limited Behavioral Health Provider Networks and Inactive Providers
26-E-02-002.01CMS should use data to monitor provider networks and take additional steps to improve the accuracy of network directories in Medicare Advantage.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- 01/27/2026
- Next Update Expected
- 03/04/2027
- Legislative Related
- No
26-E-02-002.02CMS should work with States to improve the accuracy of network directories in Medicaid managed care.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 02/17/2026
- Next Update Expected
- 03/12/2027
- Legislative Related
- No
26-E-02-002.03CMS should continue exploring how a nationwide directory could reduce inaccuracies and increase administrative efficiencies for providers and patients.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 06/04/2026
- Next Update Expected
- 08/05/2027
- Legislative Related
- No
-
Vermont Medicaid Fraud Control Unit: 2024 Inspection
26-E-07-001.01Build upon its efforts to increase fraud referrals from relevant partners.- Status
- Open Unimplemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 04/17/2026
- Next Update Expected
- 04/01/2026
- Legislative Related
- No
26-E-07-001.02Implement a comprehensive case management system that allows the Unit to efficiently access, maintain, and report case information and performance data.- Status
- Open Unimplemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 04/17/2026
- Next Update Expected
- 04/01/2026
- Legislative Related
- No
26-E-07-001.03Develop and implement a plan to improve communication and coordination with OIG and other Federal partners.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 07/15/2026
- Legislative Related
- No
26-E-07-001.04Take steps to report all adverse actions to Federal partners within the appropriate timeframes.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 07/15/2026
- Legislative Related
- No
-
Medicare Could Have Saved $301.5 Million if Bundled Payment Rates for Opioid-Use-Disorder Treatment Services Had Reflected Services Provided to Enrollees
26-A-09-001.01We recommend that the Centers for Medicare & Medicaid Services take the following actions to align its bundled payment rates with OUD treatment services provided to enrollees during an episode of care, which could have saved Medicare an estimated $301,479,659 during our audit period, use the results of our audit or gather additional information on the combination of OUD treatment services and the frequency of each type of treatment service provided to Medicare enrollees, and consider revising its methodology for determining the nondrug component of the weekly bundled payment rates.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $301,479,659
- Last Update Received
- 04/10/2026
- Next Update Expected
- 10/17/2026
- Legislative Related
- No
26-A-09-001.02We recommend that the Centers for Medicare & Medicaid Services take the following actions to align its bundled payment rates with OUD treatment services provided to enrollees during an episode of care, which could have saved Medicare an estimated $301,479,659 during our audit period, consider developing, within its statutory authority, additional HCPCS codes for the weekly bundles (e.g., codes reflecting services provided at lower frequencies).- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- 04/27/2026
- Next Update Expected
- 10/28/2026
- Legislative Related
- No
26-A-09-001.03We recommend that the Centers for Medicare & Medicaid Services work with SAMHSA (or a designated agency) to perform monitoring activities to ensure OTPs have properly documented OUD treatment services in enrollees' treatment plans.- Status
- Closed Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/01/2026
- Legislative Related
- No
-
California Met Some Requirements of the Projects for Assistance in Transition From Homelessness Program but Did Not Accurately Report Program Activities for Selected Providers
25-A-09-126.01We recommend that the California Department of Health Care Services work with relevant parties to provide guidance and training to PATH providers to accurately report data in the PATH Annual Report, especially the number of consumers enrolled in its PATH program and the total amount for Federal and non-Federal contributions.- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/12/2026
- Next Update Expected
- 03/01/2027
- Legislative Related
- No
25-A-09-126.02We recommend that the California Department of Health Care Services strengthen its oversight of the PATH program by validating that PATH providers adequately document services provided to and contacts made with consumers (e.g., by periodically performing reviews of providers' case file documentation).- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/12/2026
- Next Update Expected
- 03/01/2027
- Legislative Related
- No
-
The National Institutes of Health Needs to Improve the Cybersecurity of the All of Us Research Program to Protect Participant Data
25-A-18-127.01We recommend that NIH require the DRC awardee to implement access controls to prevent DRC and DRC-RW information systems users from accessing the systems while abroad without verified approval.- Status
- Closed Implemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/01/2026
- Legislative Related
- No
25-A-18-127.02We recommend that NIH require the DRC awardee to identify and implement a control or compensating control to prevent the downloading of detailed participant data, as required by the All of Us Data Use Policies.- Status
- Closed Implemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/17/2026
- Legislative Related
- No
25-A-18-127.03We recommend that NIH formally communicate national security concerns related to maintaining genomic data to All of Us award recipients that use or maintain genomic data and require the implementation of the IT security and privacy controls to protect the storage, transmission, and processing of such data.- Status
- Closed Implemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/01/2026
- Legislative Related
- No
25-A-18-127.04We recommend that NIH require the DRC awardee to reevaluate the security categorization for the DRC and DRC-RW information systems considering the national security concerns of maintaining genomic data.- Status
- Closed Implemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/01/2026
- Legislative Related
- No
25-A-18-127.05We recommend that NIH require the DRC awardee to update the remediation timeframe in its system security plans to comply with the timeframes specified in its award agreement with NIH.- Status
- Closed Implemented
- Responsible Agency
- NIH
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/01/2026
- Legislative Related
- No